A newly discovered macOS malware dubbed "Gaslight" is designed to confuse AI-assisted malware analysis tools by hiding prompt injection strings and fake debugging data within the executable.
Cybersecurity researchers are increasingly using AI-powered tools to assist with malware analysis and reverse engineering.
The malware contains strings that attempt to gaslight AI-assisted analysis tools into believing there is an analysis error or other issue, potentially causing the tools to abort, truncate, or otherwise interfere with the analysis.
The company attributes the malware with high confidence to a North Korean-linked threat actor.
The malware itself is a Rust binary with backdoor and information-stealing functionality commonly seen in similar malware.
